Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    08-05-2024 05:36

General

  • Target

    236c771c0b33bd7185ebcb25993b7fd0_JaffaCakes118.html

  • Size

    67KB

  • MD5

    236c771c0b33bd7185ebcb25993b7fd0

  • SHA1

    62cbe0237732a1e8e67bcb69df006759e30d84ad

  • SHA256

    816d863e7c259f3d208e5c109f61b041dd0182f7a4d3171958f66b54716650ee

  • SHA512

    fd5a56c1ae456baf3b51f3c6fd6bf11b66094d0e1208a71a3c9989548d2a03be3457869dfed25a9e1c271c37968a7aca767bf54b4e3c6ca6036491e457ef6221

  • SSDEEP

    768:JikgcMsSZ8tN99OIs/n7oTyfQCZkoTnMdtbBnfBgN8/oygcR/QFVG8c//IjkK5nM:JsWLTePec0tbrga6cuNnzIjv

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\236c771c0b33bd7185ebcb25993b7fd0_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2220
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2220 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2120

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    076a81eb2b54b5d557bcd0d2143f055f

    SHA1

    4031c29c47fe634dd2ce8a971b0110835667f6bd

    SHA256

    299bcebcb911ab66a8445cb8d55196139ef3c688c692acc927428d6e00118387

    SHA512

    fff741719553aee0d025f66016c89e0bffff835279fa2de43121dda52022cf4e599385c9cdb35efc908a9406e40646465f5498a2a2a5a7a10a1a70178525f80c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f29020548d842c5b4c319abf6000fa5d

    SHA1

    5fb7fa4df9663dc92f3a0e04e38c1f5c7af32a11

    SHA256

    7917f102955a75118345ed433034d94bfe90d19d0879dfb211eb511565c47428

    SHA512

    c5ee178e722f7f6aee8d8a04782a5aa225cfeb93ecf129677cc859a70d1c7941b79c3a24748a69282cf69132a24d7b8186b2b91f03345c1df7e18ccafc531f85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aac08ceaed088047a7312da2c42eeb05

    SHA1

    9ca4fc6179b8803812da905120a52f32504ff7f2

    SHA256

    d74483548d7a2c31a73b1a180fe8366c4121c4c5a68bc7508fdb19af5294f7dd

    SHA512

    2937c05e9722219319ceee50e83bb2dbef2a9158ace30d0f190da0846c51a3240db934e6c8b48795fdf11dc9e6beaaf0efe971c385b5c5d80e6bbe14a2ba6293

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd6065fd5d4c85a8392235c6027f46ea

    SHA1

    8e28e2755ca96738ae9ad2e45829fe3d615bb461

    SHA256

    8c66005ab2ac021b0f063ee718523aebad46c5e496614a51955f43dd77dcf237

    SHA512

    e383b922a080691e7daa5069d1623757d6633a5ad6cf8cd4818ce97cd3ff8ff795812dfd6c7d2139b87d22db94425c4691b598fe6d492e9b2aa2e9524cba767b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df2e471c6045e5da9adfb08110fc727b

    SHA1

    82f55247ce0fbb7a148825bb57aede3cd69df4a2

    SHA256

    b221930ac64a931475775a077c5e70dc67659d8e7994f7ef4c7ff14abbe11fb0

    SHA512

    f66765418772cdd265b27213064cbd5f25ff37f8599fde3c06b67bdf68688618e6964e800aad1da30dfa39e12abeaed9ca21d8a995cc7bfe50a3cc04c6382794

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0250d795d8a3f23a0379c278c404bb36

    SHA1

    9338b3e1315ea928e6f55031c1d7819713f93043

    SHA256

    846301267b000c3dca6f443895276e893155766522a931444744f185d9623e1b

    SHA512

    744080eec56f1efc180d857cc894a87933b71816d142f8f97c0b0a60172ff8cd77c840b4543fe592c2324b6c39ed6ac1f30d2733e50c2ba0333ed3e1c357d1f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a8416a39875674b812586e3cd3f09e63

    SHA1

    89fcdc82cfedd6b707d3d0f0b330be1b41f477dd

    SHA256

    991d9abe29f260851a8e49f3a5696ed957d8bae5132374133f48fc4af4322d0e

    SHA512

    e5b740f14e0742c356c18c84f49e1b8f2f650a644c559797f6805e8febe1c9f6b991835a24ed9edbd8b10a72ea035d75e0b3e66d5f2e789ab65f15d8ceb0f1cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3709db73caf306b2e9a60ea583c02a94

    SHA1

    e95ba7a845623faa473fd2b619a854cf86c28128

    SHA256

    7089f23d4ec5e9d47b992ca0e881dbf74c8489021c956b45972fb324070abc4c

    SHA512

    52f14493cd50b6cc346ccc2e89c7977a31a4e43ed6aead92f35579aa80455ada80d8d4ac3b56b0e884ed0ecec6dc24795994ff85e54ee9fcc8563de40edfa111

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e479dbcabfc095505973f07cd60cdfee

    SHA1

    bd90999779845681440f755e4c484686641c972b

    SHA256

    39b987747b1d2d92ba5ba43febfdc9a8c8ece1deba2854ea496ee41993f80237

    SHA512

    32e110f82d2f253f9118604158fcf71eafc634b5a8130c4acad84bd5e766431c97b7d6f444e1aeb0d054c22710e6299caf6a77e2097a0105b7d06de5eca5620e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    baa5372e0918fdf23a0ec34813a23135

    SHA1

    3559b8473f83d93a1776a88e6c490db59a3a184d

    SHA256

    02b573df9910415aa70c2338db975e3cfa80f416938e29bbb3777aaf2a6bdf03

    SHA512

    ca3ddb7cb137d867831cfd11b10bc5d7d9e8adbc59f72a5941ca528e5f579370ae7f2eb236fc3ff10b3fccb6cab0e6e76ddc855b09a4bfd0a9512135349c63cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    778693bee65ead766f8a8c181e3bba7b

    SHA1

    77188db8af4c951851dee023aee821e685c063d3

    SHA256

    7a00d62ea1fe3b5bf340722c7edc3e6d9030d1fe460e14f32d569213d8169658

    SHA512

    b4842e46058e6d1c846abee224247117fc69a54e6b17d80cb391e64ed6786d97545a6915b37b0d0a091a9709a1d5d5a9c45b22f770f3e28fc62b4c616666e46a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2f2a1cbdd3dd1fa1495cd7fa23831a7

    SHA1

    b1f29b61d8348c30c40a1e3b67c00868c3d9162a

    SHA256

    a37afe4d556597120e870e947943559fd1970494b78591790b83788b841201a8

    SHA512

    1c70d779bb51d3dc7b6ddf54a7454d610f39e19a42e6b472c4103fb79623388aaaaef718997c5bcfd919b7a62f613531e1efe913acc8d8361eaa2358f9c035ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b8200f9e67535e8509ec0d10a5b15b2

    SHA1

    5cdf8b8ca67f090dc8b8e3f62d170965da54d964

    SHA256

    5ab724b70b5ac81d80102cb6179feb90aadfc4d0e0b4ded57c680c69b055d3d5

    SHA512

    c166bacf28c4ca7810ecad430a98d55bf7199fa46e9a3799c08e93e8fad9eeed7e99b647dcb0267a2846bdbdd7cd12b0b1705f0e1585c6da6101f246cf2a9a01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db2d46b266830a087d2b6d571d5b6dab

    SHA1

    98544bb3528a95e6f12c84a38c54b2a8a3e49386

    SHA256

    f9f8b8d819451f5cc624cd78115957003ee1e379083fc2625917b677d3c0e530

    SHA512

    699b3680bc1ac4aa8e2ab79ca61c89c9e60757c17fe42035817bf98d6d72850401be366815b24c0aade4d25386cfc86d5ab32b646a42de9f4c77a3a21bc37307

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b1aeef7966f02c2b6102c14ef6ba6015

    SHA1

    84f9265556369e9bc82ff98eb85b687c8e894f90

    SHA256

    6778c733921e70cb8d393693a5c8f8231b5c500a8ff4c9ad43dde1cf4e049bb0

    SHA512

    af53b758d1896c2674e726000e472b2116b3da56f550d08d02a3dd3a2a6342dd104273c0b71aa00ef0ab0e051a4174e3aa648450ff9094022c25f5a2357f6b6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2302abbfc0155cc36b1bb210f2aaa78

    SHA1

    49fd9e778a157cea515bb34aa474dfd5e7afb90c

    SHA256

    991cbf051f24d5007ddd9d63966e38e562b1548445413dbe96b09c3f703dd6f2

    SHA512

    e719b742ec3de9560b91626d61bf3bd23243dc53c8665ecf02abdc6262b9e5f584c93bf814590966bd69c438d69449930d11473f27de096aaa6c2ad3d2e569dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de5fe1f61b168e16b1095ccca9cd82dc

    SHA1

    716da7f74e62dc461aac0f2ad5575cbcb20c8e1a

    SHA256

    b5ca3601c4c4b2da19b621214ebc2d4890502816e263e20bf83c462f05271d1d

    SHA512

    09c1356ca0e1652ee89c0d5ccc5f987e28f65f0d739dc65f83d940524adff0b801571e377921eb9590887bf04f2c9d5e84b3ac45c23e8067fe696f969a625538

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3b22d1af57fea64bc326d9749941aab

    SHA1

    3e06543a9adcac96edf3b417c5954a383cdbfbfb

    SHA256

    af608622f5e1faaebd5806766d057569a9078d8f717c7f07c77e5ad634281966

    SHA512

    b37aa6d34b49e25c200af7fde8e53294201f08069112d9695c435538142c1e4622f86c8f24bbf4fda710213b6f045b609f3f1efa94e8f192054516d1e9e7300b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e41962940b6943566e67cdca452f9a07

    SHA1

    ab20df1bd76c8867420634b9687c977ff9a5fa98

    SHA256

    dcea0b43d3093d0fd15698a782f2fb4898c50971cc685a47041dd486612a0619

    SHA512

    6d6e4c80afb3ba020fe89558143adca030c2767ee5870e1c48f3d9c8b607a19ef5bf34e5f4f1b52625628d77758571bd69528504f97e45c237fb70df55db938f

  • C:\Users\Admin\AppData\Local\Temp\Cab1C89.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar1CE9.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a